TROYANOSYVIRUS
Active ThreatCRITICAL

91.215.85.104

Country of Origin🇷🇺 Russia
First Detection2/27/2026
Last Activity4/5/2026
ISPProspero Ooo
🎯
258
Total Attacks
🔌
98
Ports
📡
6
Attack Types
🦠
0
Malware

Geolocation

Country
🇷🇺 Russia
City
Unknown
ASN
AS200593
ISP
Prospero Ooo

Attack Types

tcp_trap
ssh_telnet_honeypot
malware_capture
web_honeypot
tcp_trap
cisco_asa_honeypot

Attacked Ports

23804434452223232344435443546664437443744474458000800880818088809080918181+78

Associated Malware

No associated malware

Shodan InternetDB ExposureShodan

InternetDB data, not real-time

Ports
228080
Vulnerabilities
CVE-2009-3720CVE-2025-6075CVE-2021-32052CVE-2025-13836CVE-2025-13837CVE-2009-2940CVE-2025-12084CVE-2025-12781CVE-2020-29396
CPEs
cpe:/o:debian:debian_linuxcpe:/a:python:python:3.13.5cpe:/o:linux:linux_kernelcpe:/a:openbsd:openssh:10.0p2

Risk Assessment

80
/100
LowMediumHighCritical